CVE-2025-30188
HIGHOX App Suite < 2.1.7 - Denial of Service via Cache Flooding
Title source: llmDescription
Malicious or unintentional API requests can be used to add significant amount of data to caches. Caches may evict information that is required to operate the web frontend, which leads to unavailability of the component. Please deploy the provided updates and patch releases. No publicly available exploits are known
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://documentation.open-xchange.com/appsuite/security/advisories/csaf/2025/oxas-adv-2025-0002.json
Scores
CVSS v3
7.5
EPSS
0.0030
EPSS Percentile
21.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-400
Status
published
Products (1)
Open-Xchange GmbH/OX App Suite
< 2.1.7
Published
Oct 31, 2025
Tracked Since
Feb 18, 2026